RE: Incident Report - OCR

2016-10-21 Thread Robin Alden
> -Original Message- > From: Ryan Sleevi > Sent: 21 October 2016 16:06 > > As pointed out in https://bugzilla.mozilla.org/show_bug.cgi?id=1311713 , it > does seem like there's a rather large gap here between notification and report > - from 23 Sept to Oct 19. > > While it's entirely

Re: Incident Report - OCR

2016-10-21 Thread Ryan Sleevi
> On Wed, Oct 19, 2016 at 10:59 AM, Robin Alden wrote: > > > SUMMARY: > > > > Comodo was informed by security researchers Florian Heinz and Martin Kluge > > that on 23rd September 2016 they had been able to obtain a server > > authentication certificate [1] from Comodo for a